CVE-2025-39979 — Improper Update of Reference Count in Linux
Severity
7.6HIGH
No vectorEPSS
0.0%
top 92.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 15
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: fs, fix UAF in flow counter release
Fix a kernel trace [1] caused by releasing an HWS action of a local flow
counter in mlx5_cmd_hws_delete_fte(), where the HWS action refcount and
mutex were not initialized and the counter struct could already be freed
when deleting the rule.
Fix it by adding the missing initializations and adding refcount for the
local flow counter struct.
[1] Kernel log:
Call Trace:
dump_stack_…
Affected Packages4 packages
▶CVEListV5linux/linuxb581f4266928d3b5d1bbe711e39623d9a1696091 — 3c77f6d244188c3fb11f6aec40bbfe884f1803b5+2
🔴Vulnerability Details
3GHSA▶
GHSA-52rq-cpwv-rvvm: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: fs, fix UAF in flow counter release
Fix a kernel trace [1] caused by r↗2025-10-15
OSV▶
CVE-2025-39979: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix a kernel trace [1] caused by rel↗2025-10-15